Merge pull request #303387 from EdB-MSFT/remove-cat-as-author

v-ccolin · web-flow · commit 91fdd23258e2 · 2025-07-27T09:50:23.000+01:00
updated authors
diff --git a/articles/sentinel/billing-monitor-costs.md b/articles/sentinel/billing-monitor-costs.md
@@ -1,8 +1,8 @@
 ---
 title: Manage and monitor costs for Microsoft Sentinel
 description: Learn how to manage and monitor costs and billing for Microsoft Sentinel by using cost analysis in the Azure portal and other methods.
-author: cwatson-cat
-ms.author: cwatson
+author: EdB-MSFT
+ms.author: edbaynash
 ms.custom: subject-cost-optimization
 ms.topic: conceptual
 ms.date: 07/09/2025
diff --git a/articles/sentinel/configure-content.md b/articles/sentinel/configure-content.md
@@ -1,10 +1,10 @@
 ---
 title: Configure Microsoft Sentinel content
 description: In this step of your deployment, you configure the Microsoft Sentinel security content, like your data connectors, analytics rules, automation rules, and more.
-author: cwatson-cat
+author: EdB-MSFT
 ms.topic: how-to
 ms.date: 07/05/2023
-ms.author: cwatson
+ms.author: edbaynash
 
 
 #Customer intent: As a security engineer, I want to configure Microsoft Sentinel security content so that analysts can detect, monitor, and respond to security threats effectively.
diff --git a/articles/sentinel/configure-data-retention-archive.md b/articles/sentinel/configure-data-retention-archive.md
@@ -1,10 +1,10 @@
 ---
 title: Configure interactive and long-term data retention in Microsoft Sentinel
 description: Towards the end of your deployment procedure, you set up data retention to suit your organization's needs.
-author: cwatson-cat
+author: EdB-MSFT
 ms.topic: how-to
 ms.date: 07/21/2024
-ms.author: cwatson
+ms.author: edbaynash
 
 
 #Customer intent: As a security architect or SOC manager, I want to configure data retention and archiving policies so that I can ensure long-term storage of important data at a reduced cost.
diff --git a/articles/sentinel/data-connectors-reference.md b/articles/sentinel/data-connectors-reference.md
@@ -1,11 +1,11 @@
 ---
 title: Find your Microsoft Sentinel data connector | Microsoft Docs
 description: Learn about specific configuration steps for Microsoft Sentinel data connectors.
-author: cwatson-cat
+author: EdB-MSFT
 ms.topic: reference
 ms.date: 11/18/2024
 ms.custom: linux-related-content
-ms.author: cwatson
+ms.author: edbaynash
 appliesto:
     - Microsoft Sentinel in the Microsoft Defender portal
     - Microsoft Sentinel in the Azure portal
diff --git a/articles/sentinel/deploy-overview.md b/articles/sentinel/deploy-overview.md
@@ -1,8 +1,8 @@
 ---
 title: Deployment guide for Microsoft Sentinel
 description: Learn about the steps to deploy Microsoft Sentinel including the phases to plan and prepare, deploy, and fine tune.
-author: cwatson-cat
-ms.author: cwatson
+author: EdB-MSFT
+ms.author: edbaynash
 ms.topic: conceptual
 ms.date: 07/09/2025
 ms.service: microsoft-sentinel
diff --git a/articles/sentinel/deploy-side-by-side.md b/articles/sentinel/deploy-side-by-side.md
@@ -1,10 +1,10 @@
 ---
 title: Deploying Microsoft Sentinel side-by-side to an existing SIEM.
 description: Learn how to deploy Microsoft Sentinel side-by-side to an existing SIEM.
-author: cwatson-cat
+author: EdB-MSFT
 ms.topic: conceptual
 ms.date: 07/24/2024
-ms.author: cwatson
+ms.author: edbaynash
 
 
 #Customer intent: As a SOC manager, I want to understand supported methods for deploying Microsoft Sentinel alongside my existing, on-premises SIEM, so that I can transition to a more flexible and cost-effective security solution without disrupting current operations.
diff --git a/articles/sentinel/domain-based-essential-solutions.md b/articles/sentinel/domain-based-essential-solutions.md
@@ -1,10 +1,10 @@
 ---
 title: ASIM-based domain solutions - Essentials for Microsoft Sentinel
 description: Learn about the Microsoft essential solutions for Microsoft Sentinel that span across different ASIM schemas like networks, DNS, and web sessions.
-author: cwatson-cat
+author: EdB-MSFT
 ms.topic: conceptual
 ms.date: 03/01/2024
-ms.author: cwatson
+ms.author: edbaynash
 appliesto:
     - Microsoft Sentinel in the Microsoft Defender portal
     - Microsoft Sentinel in the Azure portal
diff --git a/articles/sentinel/enable-sentinel-features-content.md b/articles/sentinel/enable-sentinel-features-content.md
@@ -1,10 +1,10 @@
 ---
 title: Enable Microsoft Sentinel and initial features and content
 description: As the first step of your deployment, you enable Microsoft Sentinel, and then enable the health and audit feature, solutions, and content.
-author: cwatson-cat
+author: EdB-MSFT
 ms.topic: how-to
 ms.date: 06/18/2024
-ms.author: cwatson
+ms.author: edbaynash
 
 
 #Customer intent: As a security operations analyst, I want to enable and configure Microsoft Sentinel and its key features so that I can monitor and secure my organization's environment effectively.
diff --git a/articles/sentinel/forward-syslog-monitor-agent.md b/articles/sentinel/forward-syslog-monitor-agent.md
@@ -1,8 +1,8 @@
 ---
 title: 'Tutorial: Forward Syslog data to Microsoft Sentinel and Azure Monitor by using Azure Monitor Agent'
 description: In this tutorial, you learn how to monitor Linux-based devices by forwarding Syslog data to a Log Analytics workspace.
-author: cwatson-cat
-ms.author: cwatson
+author: EdB-MSFT
+ms.author: edbaynash
 ms.service: microsoft-sentinel
 ms.topic: tutorial
 ms.date: 05/16/2024
diff --git a/articles/sentinel/includes/data-connector-deprecation.md b/articles/sentinel/includes/data-connector-deprecation.md
@@ -1,12 +1,8 @@
 ---
-title: "include file" 
-description: "include file" 
-services: microsoft-sentinel
-author: cwatson-cat
-ms.topic: "include"
+ms.topic: include
 ms.date: 08/26/2024
-ms.author: cwatson
-ms.custom: "include file"
+ms.author: edbaynash
+author: EdB-MSFT
 ---
 <!-- docutune:disable -->
 
diff --git a/articles/sentinel/investigate-large-datasets.md b/articles/sentinel/investigate-large-datasets.md
@@ -1,10 +1,10 @@
 ---
 title: Start an investigation by searching large datasets - Microsoft Sentinel
 description: Learn about search jobs and restoring data from long-term retention in Microsoft Sentinel.
-author: cwatson-cat
+author: EdB-MSFT
 ms.topic: conceptual
 ms.date: 03/03/2024
-ms.author: cwatson
+ms.author: edbaynash
 appliesto:
     - Microsoft Sentinel in the Microsoft Defender portal
     - Microsoft Sentinel in the Azure portal
diff --git a/articles/sentinel/migration-arcsight-automation.md b/articles/sentinel/migration-arcsight-automation.md
@@ -1,8 +1,8 @@
 ---
 title: Migrate ArcSight SOAR automation to Microsoft Sentinel | Microsoft Docs
 description: Learn how to identify SOAR use cases, and how to migrate your ArcSight SOAR automation to Microsoft Sentinel.
-author: cwatson-cat
-ms.author: cwatson
+author: EdB-MSFT
+ms.author: edbaynash
 ms.topic: how-to
 ms.date: 05/03/2022
 
diff --git a/articles/sentinel/migration-arcsight-detection-rules.md b/articles/sentinel/migration-arcsight-detection-rules.md
@@ -1,8 +1,8 @@
 ---
 title: Migrate ArcSight detection rules to Microsoft Sentinel | Microsoft Docs
 description: Identify, compare, and migrate your ArcSight detection rules to Microsoft Sentinel built-in rules.
-author: cwatson-cat
-ms.author: cwatson
+author: EdB-MSFT
+ms.author: edbaynash
 ms.topic: how-to
 ms.date: 05/03/2022
 
diff --git a/articles/sentinel/migration-arcsight-historical-data.md b/articles/sentinel/migration-arcsight-historical-data.md
@@ -1,8 +1,8 @@
 ---
 title: "Microsoft Sentinel migration: Export ArcSight data to target platform  | Microsoft Docs"
 description: Learn how to export your historical data from ArcSight.
-author: cwatson-cat
-ms.author: cwatson
+author: EdB-MSFT
+ms.author: edbaynash
 ms.topic: how-to
 ms.date: 05/03/2022
 
diff --git a/articles/sentinel/migration-convert-dashboards.md b/articles/sentinel/migration-convert-dashboards.md
@@ -1,8 +1,8 @@
 ---
 title: Convert dashboards to Azure Workbooks in Microsoft Sentinel
 description: Learn how to review, planning, and migrate your current dashboards to Azure Workbooks.
-author: cwatson-cat
-ms.author: cwatson
+author: EdB-MSFT
+ms.author: edbaynash
 ms.topic: how-to
 ms.date: 06/12/2024
 appliesto:
diff --git a/articles/sentinel/migration-export-ingest.md b/articles/sentinel/migration-export-ingest.md
@@ -1,8 +1,8 @@
 ---
 title: "Microsoft Sentinel migration: Ingest data into target platform | Microsoft Docs"
 description: Learn how to ingest historical data into your selected target platform.
-author: cwatson-cat
-ms.author: cwatson
+author: EdB-MSFT
+ms.author: edbaynash
 ms.topic: how-to
 ms.date: 05/03/2022
 
diff --git a/articles/sentinel/migration-ingestion-target-platform.md b/articles/sentinel/migration-ingestion-target-platform.md
@@ -1,8 +1,8 @@
 ---
 title: "Microsoft Sentinel migration: Select a target Azure platform to host exported data | Microsoft Docs"
 description: Select a target Azure platform to host the exported historical data 
-author: cwatson-cat
-ms.author: cwatson
+author: EdB-MSFT
+ms.author: edbaynash
 ms.topic: how-to
 ms.date: 05/03/2022
 
diff --git a/articles/sentinel/migration-ingestion-tool.md b/articles/sentinel/migration-ingestion-tool.md
@@ -1,8 +1,8 @@
 ---
 title: "Microsoft Sentinel migration: Select a data ingestion tool | Microsoft Docs"
 description: Select a tool to transfer your historical data to the selected target platform.
-author: cwatson-cat
-ms.author: cwatson
+author: EdB-MSFT
+ms.author: edbaynash
 ms.topic: how-to
 ms.date: 05/03/2022
 
diff --git a/articles/sentinel/migration-qradar-automation.md b/articles/sentinel/migration-qradar-automation.md
@@ -1,8 +1,8 @@
 ---
 title: Migrate IBM Security QRadar SOAR automation to Microsoft Sentinel | Microsoft Docs
 description: Learn how to identify SOAR use cases, and how to migrate your QRadar SOAR automation to Microsoft Sentinel.
-author: cwatson-cat
-ms.author: cwatson
+author: EdB-MSFT
+ms.author: edbaynash
 ms.topic: how-to
 ms.date: 05/03/2022
 
diff --git a/articles/sentinel/migration-qradar-detection-rules.md b/articles/sentinel/migration-qradar-detection-rules.md
@@ -1,8 +1,8 @@
 ---
 title: Migrate QRadar detection rules to Microsoft Sentinel | Microsoft Docs
 description: Identify, compare, and migrate your QRadar detection rules to Microsoft Sentinel built-in rules.
-author: cwatson-cat
-ms.author: cwatson
+author: EdB-MSFT
+ms.author: edbaynash
 ms.topic: how-to
 ms.date: 05/03/2022
 
diff --git a/articles/sentinel/migration-qradar-historical-data.md b/articles/sentinel/migration-qradar-historical-data.md
@@ -1,8 +1,8 @@
 ---
 title: "Microsoft Sentinel migration: Export QRadar data to target platform | Microsoft Docs"
 description: Learn how to export your historical data from QRadar.
-author: cwatson-cat
-ms.author: cwatson
+author: EdB-MSFT
+ms.author: edbaynash
 ms.topic: how-to
 ms.date: 05/03/2022
 
diff --git a/articles/sentinel/migration-security-operations-center-processes.md b/articles/sentinel/migration-security-operations-center-processes.md
@@ -1,8 +1,8 @@
 ---
 title: "Microsoft Sentinel migration: Update SOC and analyst processes | Microsoft Docs"
 description: Learn how to update your SOC and analyst processes as part of your migration to Microsoft Sentinel.
-author: cwatson-cat
-ms.author: cwatson
+author: EdB-MSFT
+ms.author: edbaynash
 ms.topic: how-to
 ms.date: 05/03/2022
 
diff --git a/articles/sentinel/migration-splunk-historical-data.md b/articles/sentinel/migration-splunk-historical-data.md
@@ -2,8 +2,8 @@
 title: Export Splunk data to target platform
 titleSuffix: Microsoft Sentinel
 description: Learn how to export your historical data from Splunk for a Microsoft Sentinel migration of security monitoring use cases.
-author: cwatson-cat
-ms.author: cwatson
+author: EdB-MSFT
+ms.author: edbaynash
 ms.topic: how-to
 ms.date: 03/11/2024
 
diff --git a/articles/sentinel/migration-track.md b/articles/sentinel/migration-track.md
@@ -1,8 +1,8 @@
 ---
 title: Track your Microsoft Sentinel migration with a workbook | Microsoft Docs
 description: Learn how to track your migration with a workbook, how to customize and manage the workbook, and how to use the workbook tabs for useful Microsoft Sentinel actions.
-author: cwatson
-ms.author: cwatson
+author: EdB-MSFT
+ms.author: edbaynash
 ms.topic: how-to
 ms.date: 06/14/2024
 appliesto:
diff --git a/articles/sentinel/mssp-protect-intellectual-property.md b/articles/sentinel/mssp-protect-intellectual-property.md
@@ -1,10 +1,10 @@
 ---
 title: Protecting managed security service provider (MSSPs) intellectual property in Microsoft Sentinel
 description: Learn about how  managed security service providers (MSSPs) can protect the intellectual property they've created in Microsoft Sentinel.
-author: cwatson-cat
+author: EdB-MSFT
 ms.topic: conceptual
 ms.date: 01/09/2023
-ms.author: cwatson
+ms.author: edbaynash
 
 
 #Customer intent: As an MSSP, I want to understand how to protect my intellectual property in Microsoft Sentinel so that I can maintain control over my proprietary analytics rules, hunting queries, playbooks, and workbooks while providing managed security services to my customers.
diff --git a/articles/sentinel/notebooks-hunt.md b/articles/sentinel/notebooks-hunt.md
@@ -1,8 +1,8 @@
 ---
 title: Hunt for security threats with Jupyter notebooks - Microsoft Sentinel
 description: Launch and run notebooks with the Microsoft Sentinel hunting capabilities.
-author: cwatson-cat
-ms.author: cwatson
+author: EdB-MSFT
+ms.author: edbaynash
 ms.topic: how-to
 ms.date: 06/20/2024
 appliesto:
diff --git a/articles/sentinel/notebooks.md b/articles/sentinel/notebooks.md
@@ -1,8 +1,8 @@
 ---
 title: Jupyter notebooks with Microsoft Sentinel hunting capabilities
 description: Learn about Jupyter notebooks in Microsoft Sentinel for security hunting.
-author: cwatson-cat
-ms.author: cwatson
+author: EdB-MSFT
+ms.author: edbaynash
 ms.topic: conceptual
 ms.custom: devx-track-python
 ms.date: 03/07/2024
diff --git a/articles/sentinel/offboard-implications.md b/articles/sentinel/offboard-implications.md
@@ -1,10 +1,10 @@
 ---
 title: Implications - remove Microsoft Sentinel from workspace 
 description: Learn about the impact of removing a Microsoft Sentinel instance from a Log Analytics workspace in the Azure or Defender portal.
-author: cwatson-cat
+author: EdB-MSFT
 ms.topic: concept-article
 ms.date: 02/06/2025
-ms.author: cwatson
+ms.author: edbaynash
 appliesto:
     - Microsoft Sentinel in the Microsoft Defender portal
     - Microsoft Sentinel in the Azure portal
diff --git a/articles/sentinel/offboard.md b/articles/sentinel/offboard.md
@@ -1,10 +1,10 @@
 ---
 title: Remove Microsoft Sentinel from your workspace
 description: Learn how to delete your Microsoft Sentinel instance to discontinue use of Microsoft Sentinel and the associated costs.
-author: cwatson-cat
+author: EdB-MSFT
 ms.topic: how-to
 ms.date: 07/16/2025
-ms.author: cwatson
+ms.author: edbaynash
 appliesto:
     - Microsoft Sentinel in the Microsoft Defender portal
     - Microsoft Sentinel in the Azure portal
diff --git a/articles/sentinel/ops-guide.md b/articles/sentinel/ops-guide.md
@@ -3,8 +3,8 @@ title: Operational guide - Microsoft Sentinel
 description: Learn about the operational recommendations to help security operations teams to plan and run security activities.
 ms.date: 08/30/2024
 ms.topic: reference
-ms.author: cwatson
-author: cwatson-cat
+ms.author: edbaynash
+author: EdB-MSFT
 appliesto:
     - Microsoft Sentinel in the Microsoft Defender portal
     - Microsoft Sentinel in the Azure portal
diff --git a/articles/sentinel/partner-integrations.md b/articles/sentinel/partner-integrations.md
@@ -1,8 +1,8 @@
 ---
 title: Partner integrations with Microsoft Sentinel
 description: This article describes best practices for creating your own integrations with Microsoft Sentinel.
-author: cwatson-cat
-ms.author: cwatson
+author: EdB-MSFT
+ms.author: edbaynash
 ms.topic: conceptual
 ms.date: 01/09/2023
 
diff --git a/articles/sentinel/prioritize-data-connectors.md b/articles/sentinel/prioritize-data-connectors.md
@@ -1,10 +1,10 @@
 ---
 title: Prioritize data connectors for Microsoft Sentinel
 description: Learn how to plan and prioritize which data sources to use for your Microsoft Sentinel deployment.
-author: cwatson-cat
+author: EdB-MSFT
 ms.topic: conceptual
 ms.date: 06/29/2023
-ms.author: cwatson
+ms.author: edbaynash
 ms.service: microsoft-sentinel
 
 
diff --git a/articles/sentinel/resource-context-rbac.md b/articles/sentinel/resource-context-rbac.md
@@ -1,10 +1,10 @@
 ---
 title: Manage access to Microsoft Sentinel data by resource
 description: This article explains you can manage access to Microsoft Sentinel data by the resources a user can access. Managing access by resource enables you to provide access to specific data only, without the entire Microsoft Sentinel experience. This method is also known as resource-context RBAC.
-author: cwatson-cat
+author: EdB-MSFT
 ms.topic: conceptual
 ms.date: 01/09/2023
-ms.author: cwatson
+ms.author: edbaynash
 
 
 #Customer intent: As a security administrator, I want to understand when to use Azure RBAC at the resource-context level so that I can grant specific data access to users without exposing the entire Microsoft Sentinel environment.
diff --git a/articles/sentinel/restore.md b/articles/sentinel/restore.md
diff --git a/articles/sentinel/sample-workspace-designs.md b/articles/sentinel/sample-workspace-designs.md
diff --git a/articles/sentinel/sentinel-solutions-catalog.md b/articles/sentinel/sentinel-solutions-catalog.md
diff --git a/articles/sentinel/sentinel-solutions-delete.md b/articles/sentinel/sentinel-solutions-delete.md
diff --git a/articles/sentinel/sentinel-solutions-deploy.md b/articles/sentinel/sentinel-solutions-deploy.md
diff --git a/articles/sentinel/unified-connector-cef-device.md b/articles/sentinel/unified-connector-cef-device.md
diff --git a/articles/sentinel/watchlist-schemas.md b/articles/sentinel/watchlist-schemas.md
diff --git a/articles/sentinel/watchlists-manage.md b/articles/sentinel/watchlists-manage.md
diff --git a/articles/sentinel/watchlists-queries.md b/articles/sentinel/watchlists-queries.md
